Which of the following security protocols will you use to encrypt Web traffic?

You work as a Server Administrator for company Inc. You want all transactions to the storefront on
the Web server to be encrypted. Which of the following security protocols will you use to encrypt
Web traffic?

A.
L2TP

B.
PPTP

C.
SSL

D.
IPSec

Explanation:
In order to encrypt Web traffic, you should use the SSL protocol. The Secure Sockets Layer (SSL) is a
commonly-used protocol for managing the security of a message transmission on the Internet. SSL

has recently been succeeded by Transport Layer Security (TLS), which is based on SSL. SSL uses a
program layer located between the Internet’s Hypertext Transfer Protocol (HTTP) and Transport
Control Protocol (TCP) layers. SSL is included as part of both the Microsoft and Netscape browsers
and most Web server products. URLs that require an SSL connection start with https: instead of
http:.

B is incorrect. Point-to-Point Tunneling Protocol (PPTP) is a method for implementing
virtual private networks. PPTP does not provide confidentiality or encryption. It relies on the
protocol being tunneled to provide privacy. It is used to provide secure, low-cost remote access to
corporate networks through public networks such as the Internet. Using PPTP, remote users can use
PPP-enabled client computers to dial a local ISP and connect securely to the corporate network
through the Internet. PPTP has been made obsolete by Layer 2 Tunneling Protocol (L2TP) and IPSec.

A is incorrect. Layer 2 Tunneling Protocol (L2TP) is a more secure version of Point-to-Point
Tunneling Protocol (PPTP). It provides tunneling, address assignment, and authentication. It allows
the transfer of Point-to-Point Protocol (PPP) traffic between different networks. L2TP combines with
IPSec to provide tunneling and security for Internet Protocol (IP), Internetwork Packet Exchange
(IPX), and other protocol packets across IP networks.

D is incorrect. Internet Protocol Security (IPSec) is a standard-based protocol that provides
the highest level of VPN security. IPSec can encrypt virtually everything above the networking layer.
It is used for VPN connections that use the L2TP protocol. It secures both data and password.
IPSec cannot be used with Point-to-Point Tunneling Protocol (PPTP).